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ABSTRACT 


In order to solve the problem of high false positive rate of traditional SVD domain digital watermarking algorithm, a digital 
watermarking algorithm based on IWT and SVD is proposed. The algorithm firstly decomposes the carrier image into 1 IWT to 
obtain 4 subbands, then performs SVD transformation on the 4 subbands, and directly embeds the watermark image information 
into the singular values of the 4 subbands of the carrier image. In the process of embedding watermark, a digital signature 
authentication mechanism is proposed. The generated digital signature is used to encrypt the watermark image by embedding a 
digital signature when the watermark is embedded. Before extracting the watermark, verify the digital signature to avoid false 
positives. Experiments show that the algorithm has good visibility and ability to resist various attacks. 


Keywords: integer wavelet transform; singular value decomposition; digital signature; watermark; false alarm 


1. INTRODUCTION 


Integer wavelet transform (IWT) is the core part of the new generation image compression standard JPEG2000. Its main advantage is 
that it can realize integer-to-integer mapping in image decomposition and reconstruction process, ensuring that the image loses 0 
in the transform part. A true lossless reversible wavelet transform IWT runs faster than DWT [1]. IWT is widely used in watermark 
encryption of digital images to protect copyright [2-3]. 

Singular value decomposition (SVD) is a linear algebra tool commonly used in image compression, signal-to-noise separation 
and so on. In [4], a self-embedding technique is proposed to propose a DWT-SVD domain full-blind robust quantization 
watermarking algorithm. The self-embedding feature watermark sequence and the blind extraction authentication watermark 
sequence are used to achieve full blind detection. In [5], an image authentication watermarking algorithm based on SVD and a 
pseudo-random cyclic chain composed of Logistic chaotic system is proposed, which improves the watermark security and 
effectively resists vector quantization attacks. In [6], the advantages of Contourlet transform and singular value are combined. A 
robust watermarking algorithm based on singular value decomposition in Contourlet domain is proposed, which is robust to both 
conventional attacks and geometric attacks. In [7] order to improve the stability of watermark, a digital image watermark creation 
algorithm based on chaos and SVD-DWT is proposed. Digital image watermarks sensitive to signal processing and geometric 
distortion are recommended. It can show from the existing research literature that SVD combined with other analysis tools usually 
has good visual and robustness in digital image watermarking applications. However, the classic SVD algorithm has a high false 
alarm problem when extracting watermarks. Literature [8] analyzed that the root cause of the high false alarm rate of the SVD 
watermarking algorithm is that the base space of the image SVD decomposition is related to the image content. There is no one-to- 
one correspondence between the singular value vector and the image, and the geometry of the image cannot be characterized. The 
main defect of the algorithm is not in the extraction process, but in the embedded algorithm that only the singular value vector of 
the watermark image is implanted, and there is no structural information of the watermark image in the base space. Therefore, this 
paper proposes an improved algorithm based on block SVD and DCT decomposition. In [9] and [10], the problem of excessive false 
alarm probability for a class of SVD domain image watermarking schemes is proposed. An improved hybrid DWT and SVD image 
reference watermarking algorithm is proposed. The above improved algorithm idea is to avoid using the matrix U, V when 
extracting. However, once the attacker has mastered the U and V matrices of the copyright image, the unauthorized image can also 
be pseudo-claimed. 

According to the reason that the false alarm rate of the SVD watermarking algorithm analyzed by the literature [8] is too high, 
the SVD transform is performed after the IWT decomposition of the carrier image, and the U and V matrix in the SVD transform is 
proposed in the watermark embedding process. The digital signature encryption authentication mechanism overcomes the problem 
of excessive false alarm of the traditional SVD algorithm, and verifies the visual and robustness of the algorithm through 
experiments. 


2. WATERMARKING ALGORITHM OF IWT-SVD 

Digital signature authentication mechanism 

It has been shown that the drawback of the high false alarm rate of the SVD algorithm is that the watermark embedding uses only 
the singular value feature vector vector S of the carrier image, while the matrices U and V preserve most of the information of the 
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image. If the U and V orthogonal matrices are used in extracting the watermark, A vector of singular values of the image without 


watermark is synthesized, and an image very similar to the original structure of the watermark image can be reconstructed, which 
will result in an erroneous alarm. Therefore, in this paper, we propose a signature authentication mechanism for matrices U and V to 
solve this problem. The authentication mechanism is divided into three parts: signature generation, signature implementation, 
signature extraction and verification. First, use a signature injection program to create a unique signature that is embedded in the 
image. In this task, the signature embedding program and the watermark embedding program are completed simultaneously. The 
signature is generated at the stage of embedding the watermark, and in the final stage of embedding the watermark, the signature 
is embedded in the image of the watermark. In the detection phase, the decoder first extracts the signature and compares it with the 
signature generated by the matrices U and V received by the client. If the signatures match, the authorization is granted and the 
watermark continues to be extracted. Otherwise, the extraction operation will end. 

After the signature is generated, the image is decomposed by SVD, and the unique binary data is generated as a digital 
signature by the encryption algorithm to encrypt the image matrices U and V. This signature does not randomly allow an attacker to 
make a prediction. To improve security, a key pair algorithm is also used in the signature generation process. The digital signature 
process is as follows: 

(a)Transforming the two-dimensional orthogonal matrix U, V after SVD decomposition into a one-dimensional array; 
(b)Hashing the orthogonal matrices U, V using the SHA-1 algorithm: 
Digy = Hashing(sya-1)(U), 
Digy = Hashing (sya-1)(V). 
(c) Convert Dig_U and Dig_V to the corresponding binary numbers, then XOR them, and save the result to K1. 
k1 = convert, (Dig_y) ® convert, (Dig_y). 
(d) Set an initial key, name it K2, convert it to a binary number, and perform an exclusive OR operation with K1, and save the result 
to K3. 
K3 = K1 @ K2 
(e) Select the first 8 bits of the binary number K3 as the digital signature and name it Sig. 

The embedded signature is performed after the watermark is embedded in the carrier image. Since the generated digital 
signature has only an 8-bit binary number, embedding the signature in the water-imprinted image does not affect the quality of the 
image. In order to achieve better robustness, the image is subjected to a 1-level DWT decomposition, and the corresponding sub- 
blocks of the energy-concentration sub-band LL are selected for SVD decomposition, and then the first column element of the U 
matrix of each sub-band is changed by changing the water-imprinted image. Embed digital signatures. Experiments have shown that 
it is best to embed digital signatures using the second element of the first column of the orthogonal vector of matrix U. The 
signature embedding process is as follows: 

(a) Perform a 1-level DWT decomposition on the water-imprinted image to obtain a low-frequency sub-band LL, and divide the LL 
sub-band into 8*8 sub-blocks; 
(b) Randomly selecting 8 sub-blocks using a key and performing SVD on each sub-block of the selected 8 sub-blocks; 
(c) Select the second element of the first column of the orthogonal vector of each sub-block matrix U (ie, the second row and the 
first column) by 10, and then perform the rounding down. 
Uz1 = [U2z1 x 10] 

(d) If the bit value of the digital signature is 1 and U,,is an even number, or if the bit value of the digital signature is 0 and U,,is an 
odd number, then: 

Uz, =[Uz1, + 1]mod 10; 
(e) Performing an inverse SVD operation on the selected 8 sub-blocks; 
(f) The inverse DWT operation completes the embedding of the signature. 


Signature extractor 
(a) After performing a first-level DWT transformation on the received image, dividing the LL sub-band into 8*8 sub-blocks; 
(b) Selecting a corresponding sub-block according to the set key; 
(c) Performing SVD conversion on the selected sub-block; 
(d) Test U,, using the following formula: 
1, if([Uz1 + 10]) mod2 =0 


S (i) = to if ([Us1 + 10]) mod2 + 0 Fe ie ley Sorrento 
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Watermark embedding 


Integer wavelet transform is a typical representative of lifting wavelet transform. All classical wavelet algorithms can be implemented 
using the lifting wavelet algorithm, and have the advantages of high speed, no need for auxiliary memory, easy implementation and 
easy implementation of inverse transform [11] [12]. The integer wavelet transform is divided into three steps: splitting, prediction, 
and updating. In this paper, the carrier image is decomposed by integer wavelet transform, then SVD transform is performed, then 
the watermark image information is embedded into the singular value of the carrier image by the additive rule, and the 
watermarked image is encrypted by using the generated signature [13]. The specific algorithm is as follows. 

(a) Performing first-order I|WT decomposition on the carrier image P to obtain four sub-bands: LL, HL, LH, HH; 

(b) Perform SVD conversion on the four sub-bands LL, HL, LH, and HH: 

P; = U;SiV;' ,i represents the corresponding sub-band; 

(c) Embedding the watermark information directly into the singular value of the corresponding subband of the carrier image P, 
applying the SVD transform to modify the odd of the corresponding subband. 

(d) U, V matrix corresponding to LL, HL, LH, HH4 subbands (Ui“ and Vi™) after applying the signature generation program to 
generate four 8-bit digital signatures Sigit, Sigut, Sigty, SiguH, the XOR operation forms the final signature: 


Watermark extraction process 

Before extracting the watermark, the four subsets of Ui“ and Vi after SVD decomposition of the received image are detected and 
authenticated. The process of authentication is to first generate a digital signature using the key and then match the digital 
signature extracted from the U;“ of the received image and the four subsets of Vi". If the digital signature matches, the watermark 
extraction process continues and the embedded watermark is extracted. Otherwise, it is considered a false alarm and the procedure 
is terminated. The specific steps of watermark extraction after digital signature matching are as follows. 

(a) Performing a level 1 IWT decomposition on the received watermarked image P*W to generate four sub-bands LL, LH, HL, HH; 

(b) Perform SVD operations on all subbands: 

pw =U; svi 

(c) Calculate each subband as follows: 

BY, =UMS*ViT™ ; 


The original image The original watermarking image 


moe By 


The binary watermarking The scrambled watermarking image 


Figure 1 Watermark image 
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3. EXPERIMENTAL RESULT 
The algorithm in this paper was implemented using MATLAB 2018, and the image was tested in a 32-bit. The experiment uses a 


grayscale image of 512x512 Lena as the carrier image, and the watermark image is a 64x64 binary image, as shown in Fig.1. The 
visual and robustness of the algorithm are verified by different experiments. 


Conventional Attacks 
In order to further verify the robustness of the algorithm, adding Gaussian noise, JPEG compression to the image is performed on 


the algorithm (table 1). 


Table 1 The NC under Conventional Attacks based on IWT-SVD. 


Gaussian noise JPEG Compression 
Conventional attacks 
2% 4% | 6% 5% 10% 15% 
NC 0.86 | 0.92 0.85 0.90 0.88 0.95 


Geometric Attacks 
In order to further verify the robustness of the algorithm, adding Geometric Attacks to the image is performed on the algorithm 
(table 2). 


Table 2 The NC under Geometric Attacks based on IWT-SVD. 


Geometric Attacks Attack strength NC 
; 10° 0.92 
Rotation a 
: 20 0.91 
(clockwise) F 
30 0.88 
; 5° 0.86 
Rotation 4 
. . 15 0.94 
(Anticlockwise) ‘ 
30 0.86 
. «0.6 0.82 
Scaling 
«0.8 0.88 
: 5% 0.90 
Translation 
; 10% 0.89 
(Right) 
20% 0.95 
8% 0.86 
Translation (down) 20% 0.91 
25% 0.82 
Clipping 15% 0.88 
(Ydirection) 20% 0.95 
Clipping 10% 0.92 
(X direction) 20% 0.94 


Compared to other algorithms Table 3 Show the robustness of the proposed algorithm to both technical and conventional 
attacks compared to IWT and SVD methods. The robustness of the watermarking algorithm improved by correcting rotation for 
rotation is superior to the watermarking algorithm. 
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Table 3 Comparison of the three algorithms 


NC 
Attacks strength 
IWT SVD IWT-SVD 
Rotation 10° 
: 0.65 0.32 0.92 

(Clockwise) 
Rotation 15° 

: ; 0.72 0.55 0.94 
(Anticlockwise) 
Scaling (x0.8) 0.42 0.72 0.88 
Translation 20% (right) 0.76 0.40 0.95 
Translation 20% (down) 0.55 0.68 0.91 
Cropping 20% (Xaxis) 0.88 0.76 0.94 
Cropping 20% (Y axis) 0.82 0.78 0.95 
JPEG Compression (15%) 0.55 0.67 0.92 
Gaussian noise (4%) 0.44 0.80 0.95 


4. CONCLUSION 


In practical applications, digital image watermarking technology requires both good transparency and robustness against various 


types of attacks. It also requires effective control of the false alarm probability during detection. In this paper, based on the 


advantages of fast decomposition and lossless reversibility of IWT, a digital signature mechanism is proposed for the traditional SVD 


method, and the image is encrypted while the watermark is embedded. The digital signature is verified before the watermark is 


extracted. If the signature is incorrect, the watermark cannot be correctly extracted, and the watermark cannot be extracted in the 


carrier image without the watermark embedded, thereby effectively. Overcome the problem of excessive false alarm rate in the 


traditional SVD method. Experiments show that the proposed algorithm has good visual and robustness. 
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